Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: 9O6q/3W3/5tG5wlPwnXRdgsOgU2jhZ9c48DxCTlIcxY=
Subject key identifier: CD:74:49:A0:F0:3B:35:61:5E:70:6B:4A:DF:41:B7:AA:0A:A5:BC:98
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 01A0D7607CF0E2C00FED1302719F6BE404AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 1A01
Signing time: Fri 25 Sep 2026 07:03:39 +0000
Manifest this update: Fri 25 Sep 2026 07:03:39 +0000
Manifest next update: Sat 26 Sep 2026 07:03:39 +0000
Files and hashes: 1: 1XdNFJlYALUGMKogiIBRKN_MGo4.roa (hash: E2oHH/KY2uFlsQZera9X/UCkx0/EdwNbRkr7QYI3dr0=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: XDzFqjdeo17jgDGdh5a2Xla3D5P41Q7lQzTKPh3eRTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:7c:f0:e2:c0:0f:ed:13:02:71:9f:6b:e4:04:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Sep 25 07:03:39 2026 GMT
Not After : Sep 26 07:03:39 2026 GMT
Subject: CN=cd7449a0f03b35615e706b4adf41b7aa0aa5bc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:9f:c1:53:3a:1e:d7:42:da:ea:5a:dc:56:
ae:bf:70:fe:74:d8:c2:0e:ce:20:a0:73:a1:5b:0d:
26:6b:44:f6:10:df:28:67:8b:56:48:ac:c8:9d:2d:
87:f3:f3:64:c9:82:e9:95:18:29:41:7f:3b:fd:6f:
ab:ae:b4:5a:36:a1:6b:32:76:20:2c:55:a3:60:69:
dc:a2:61:60:19:1f:fc:1b:7e:2a:4b:11:1c:a3:cd:
8c:3e:74:99:45:82:aa:bf:fd:65:b4:b6:18:e2:7b:
78:69:58:25:13:24:8b:04:bd:c0:13:ae:a2:30:03:
bf:12:11:aa:97:3f:65:53:ae:5e:9e:62:8c:c8:85:
be:a5:e4:5d:c8:ba:0c:46:07:71:c1:e7:b4:11:ee:
d8:01:d1:9e:e9:ef:8c:8a:e5:6f:7f:88:d5:b9:a0:
ac:9c:2b:85:5d:84:36:2e:eb:b2:71:84:c4:7c:72:
a3:b2:cb:7a:71:91:e3:2f:d1:54:0e:88:9c:01:0f:
b4:b6:6c:5f:d0:02:82:cb:2a:3a:d2:30:2b:49:cf:
50:e5:1f:a0:16:84:e6:d3:e4:61:1e:37:b8:56:2d:
9b:74:c0:c4:3b:ea:0b:b7:3d:4e:59:f7:90:01:c0:
d7:e9:a5:1f:26:46:9a:6d:9c:13:d7:7b:49:69:f6:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:74:49:A0:F0:3B:35:61:5E:70:6B:4A:DF:41:B7:AA:0A:A5:BC:98
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c0:f7:0c:af:f9:c5:7d:2b:6c:8a:ef:07:c6:5f:00:ba:0d:
1e:78:93:65:22:18:01:7e:92:44:26:b4:f6:52:8e:30:15:a7:
8a:50:9a:7d:e6:2a:fe:39:52:50:dc:1e:6a:69:36:4c:58:cf:
58:28:f4:15:cf:f8:a6:62:28:64:30:8d:c1:33:c5:68:ad:a3:
b4:00:cf:b6:5a:67:fe:96:7f:ea:67:13:b7:b2:79:b8:4c:25:
97:3f:34:f2:81:15:b5:fd:ad:6a:fc:a1:99:32:64:65:c2:b8:
65:d4:01:5f:40:e8:95:2a:79:c8:10:8b:f9:4e:78:b9:57:9f:
ac:e5:f9:b4:b3:50:00:8c:4f:fa:37:36:6c:52:18:aa:91:41:
a7:97:ec:91:e7:34:7f:67:97:3f:61:d0:9e:52:bc:53:1b:43:
4f:ee:6e:73:ec:51:1b:74:59:5e:d3:f9:2e:1b:29:c7:ce:61:
a8:a6:b0:e5:b3:6e:f4:67:02:bf:2d:3c:ba:29:57:01:ab:04:
88:63:b2:f2:e8:0c:2d:19:6f:63:09:30:56:34:b2:57:49:ab:
5a:db:db:01:f2:b5:9a:48:28:54:c8:a9:4d:6b:10:62:61:00:
6e:41:5f:51:60:9b:af:90:ab:a0:68:77:7a:d6:83:7e:c4:d3:
4c:72:46:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:17:39 2026 by rpki-client